$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa File: 48dc100e-8d7e-3d30-90c2-6334f2764387.roa (raw, json) Hash identifier: qa86qIveXhuKtNZTp/DjHaLEqzLl9lPs37fAjIUNmKU= Subject key identifier: 17:91:0C:76:D8:61:91:C8:FD:41:64:25:76:DC:47:F8:93:9A:B4:24 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D40CA5C07508651999B451340 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 63199 IP address blocks: 148.153.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5c:07:50:86:51:99:9b:45:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=e64c4aa3-b44c-48f6-ba22-1c3dd69de064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:95:4f:59:56:47:42:fb:d1:c7:85:7d:0a: b3:ce:47:f1:8b:9c:f0:68:0e:85:75:cd:a9:8e:f7: 06:9d:4a:68:fe:2a:f3:da:fc:e8:b6:6c:8f:59:fd: 92:13:00:c5:c4:47:a3:19:18:24:73:f1:65:d1:e0: 4d:a4:d3:69:b0:51:39:55:4e:f8:2e:65:36:4d:db: 6b:08:96:eb:19:b2:5d:1e:76:30:6d:19:1b:44:b4: 47:07:6d:33:a7:d5:31:8d:c8:5f:93:b7:a4:64:be: 5b:ab:b3:d2:c5:d3:1f:80:83:2b:fe:b2:9e:5c:4e: fa:68:fd:a3:9b:fa:08:57:b9:d8:96:a1:df:d4:0a: 05:e9:d1:29:15:74:5a:e7:c1:95:56:ce:0a:da:c9: a7:c1:1a:d4:f5:cf:aa:06:fd:32:a7:4c:19:9b:67: e5:53:7c:90:8a:cb:48:cd:89:4e:28:d8:a4:74:5a: 36:70:ea:2d:c2:ba:fb:ed:d8:c3:93:59:47:e7:b3: 18:c0:76:44:c5:ef:cd:5e:d9:ca:47:fa:f5:44:58: cf:4a:ab:5a:f7:12:c0:55:6c:4f:bc:63:d4:19:26: fc:55:f3:c1:30:a4:00:0d:00:c7:58:2c:75:43:5d: 35:96:fc:87:11:b4:39:7d:27:d9:1c:d0:d4:0d:c5: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:0C:76:D8:61:91:C8:FD:41:64:25:76:DC:47:F8:93:9A:B4:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0b:8f:7b:cd:26:89:67:f9:04:a9:b0:08:ff:e4:b1:ee:95: 22:0a:4e:52:8d:0a:ef:04:5a:90:90:3f:e3:8e:ab:26:ed:60: 96:00:f3:30:13:68:73:52:0f:9b:94:d4:57:76:ed:f2:2a:bb: 69:a5:65:e0:df:de:83:46:df:1a:d7:d4:3e:5d:de:66:0b:fb: d1:ab:7b:7e:cd:45:49:32:0f:d1:d2:f0:3b:8c:b5:c7:1b:a2: 66:11:d2:df:c7:58:ae:33:82:36:dd:ce:77:b8:b5:36:a2:1c: 27:dd:42:f0:af:07:fe:4f:f1:fa:2d:73:66:ca:0b:a3:82:f8: c5:d8:91:b8:50:ee:f1:a3:ec:f8:01:bf:e0:5f:98:31:21:0a: 1c:64:5f:7a:8a:8b:51:15:f9:98:6b:e2:4a:48:4b:ee:e6:41: 20:3d:85:61:f8:3f:1d:6e:58:66:93:14:0d:7c:f8:12:1d:37: 71:91:dd:e5:e0:a7:3a:86:51:ea:0b:be:7a:10:ea:78:46:73: 5f:dd:50:d9:1d:b1:34:70:29:ed:44:67:da:78:3a:ba:0f:2a: e9:6e:6e:44:59:04:96:66:8b:8d:ae:86:76:8a:d5:83:ad:ad: 67:2c:d9:22:4f:9f:ef:3d:6f:fe:17:6e:5a:cc:47:12:e0:5a: e5:d2:16:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylwHUIZRmZtFE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTY0YzRhYTMtYjQ0Yy00OGY2LWJhMjItMWMzZGQ2OWRlMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAaVT1lWR0L70ceFfQqzzkfxi5zwaA6Fdc2p jvcGnUpo/irz2vzotmyPWf2SEwDFxEejGRgkc/Fl0eBNpNNpsFE5VU74LmU2Tdtr CJbrGbJdHnYwbRkbRLRHB20zp9Uxjchfk7ekZL5bq7PSxdMfgIMr/rKeXE76aP2j m/oIV7nYlqHf1AoF6dEpFXRa58GVVs4K2smnwRrU9c+qBv0yp0wZm2flU3yQistI zYlOKNikdFo2cOotwrr77djDk1lH57MYwHZExe/NXtnKR/r1RFjPSqta9xLAVWxP vGPUGSb8VfPBMKQADQDHWCx1Q101lvyHEbQ5fSfZHNDUDcWiOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeRDHbYYZHI/UFkJXbcR/iTmrQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDhkYzEwMGUtOGQ3ZS0z ZDMwLTkwYzItNjMzNGYyNzY0Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYLj3vNJoln+QSpsAj/5LHulSIKTlKNCu8EWpCQP+OOqybtYJYA8zAT aHNSD5uU1Fd27fIqu2mlZeDf3oNG3xrX1D5d3mYL+9Gre37NRUkyD9HS8DuMtccb omYR0t/HWK4zgjbdzne4tTaiHCfdQvCvB/5P8fotc2bKC6OC+MXYkbhQ7vGj7PgB v+BfmDEhChxkX3qKi1EV+Zhr4kpIS+7mQSA9hWH4Px1uWGaTFA18+BIdN3GR3eXg pzqGUeoLvnoQ6nhGc1/dUNkdsTRwKe1EZ9p4OroPKulubkRZBJZmi42uhnaK1YOt rWcs2SJPn+89b/4XblrMRxLgWuXSFs0= -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:10 2026 by rpki-client